HIGHnpm
GHSA-5vhg-9xg4-cv9m· CVE-2024-49365tiny-secp256k1 allows for verify() bypass when running in bundled environment
Modified: 7/1/2025
package
npm/tiny-secp256k1
pkg:npm/tiny-secp256k1
HIGHnpm
GHSA-7mc2-6phr-23xc· CVE-2024-49364tiny-secp256k1 vulnerable to private key extraction when signing a malicious JSON-stringifyable message in bundled environment
Modified: 7/1/2025